2.4.x has slightly worse results than 2.6.x if you use IRQ affinity, but really sucks if you don't, since the kernel doesn't balance IRQ's by itself (and irqbalance daemon only balances every 10 seconds)

You can route up to 1Mpps at 64bytes packet size

ip_conntrack and iptable_filter at suck at least 300kpps, giving 700kpps as a result